Dlink Di-8003 Firmware vulnerabilities

CVE-2024-52755 [MEDIUM] CWE-787 CVE-2024-52755: D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the host_ip parameter in D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the host_ip parameter in the ipsec_road_asp function.

CVE-2024-52757 [MEDIUM] CWE-787 CVE-2024-52757: D-LINK DI-8003 v16.07.16A1 was discovered to contain a buffer overflow via the notify parameter in t D-LINK DI-8003 v16.07.16A1 was discovered to contain a buffer overflow via the notify parameter in the arp_sys_asp function.

CVE-2024-52754 [MEDIUM] CWE-787 CVE-2024-52754: D-LINK DI-8003 v16.07.16A1 was discovered to contain a buffer overflow via the fn parameter in the t D-LINK DI-8003 v16.07.16A1 was discovered to contain a buffer overflow via the fn parameter in the tgfile_htm function.

CVE-2024-52759 [CRITICAL] CWE-120 CVE-2024-52759: D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the i D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ip_position_asp function.

CVE-2024-11048 [HIGH] CWE-119 CVE-2024-11048: A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been rated as critical. Affected by t A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been rated as critical. Affected by this issue is the function dbsrv_asp of the file /dbsrv.asp. The manipulation of the argument str leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2024-11047 [HIGH] CWE-119 CVE-2024-11047: A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been declared as critical. Affected b A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been declared as critical. Affected by this vulnerability is the function upgrade_filter_asp of the file /upgrade_filter.asp. The manipulation of the argument path leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and ma

CVE-2024-11046 [MEDIUM] CWE-77 CVE-2024-11046: A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been classified as critical. Affected A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been classified as critical. Affected is the function upgrade_filter_asp of the file /upgrade_filter.asp. The manipulation of the argument path leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.